last executing test programs: 49.775259637s ago: executing program 1 (id=1726): syz_usb_connect$lan78xx(0x4, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x3, 0x2}, 0x8) close(r0) 47.205209448s ago: executing program 1 (id=1774): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000e80)=ANY=[], 0x381, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) 46.933645002s ago: executing program 1 (id=1776): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 46.786747467s ago: executing program 1 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000002180)='./file0/../file0\x00', 0x9) 46.73027263s ago: executing program 1 (id=1778): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 46.609212279s ago: executing program 1 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}]}, 0x34}}, 0x0) 46.609107839s ago: executing program 32 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}]}, 0x34}}, 0x0) 25.00618687s ago: executing program 3 (id=2136): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) 24.936876467s ago: executing program 3 (id=2138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x43, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 22.138626472s ago: executing program 3 (id=2150): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffff9, r0, 0x1) 22.070827258s ago: executing program 3 (id=2152): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESDEC=r0], 0x6) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.945100777s ago: executing program 3 (id=2158): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x800}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 21.789583094s ago: executing program 3 (id=2167): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 7.817462553s ago: executing program 0 (id=2223): r0 = io_uring_setup(0x6c0c, &(0x7f0000000000)={0x0, 0x451b, 0x0, 0x3, 0x1c1}) r1 = syz_io_uring_setup(0x3434, &(0x7f0000000440)={0x0, 0x0, 0x2, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000000)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 7.816084584s ago: executing program 4 (id=2226): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@grpquota}, {@inlinecrypt}, {@delalloc}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x8001, 0x2, 0x9}, 0x26, [0x2, 0x79, 0x2, 0x8, 0x0, 0x4, 0x8, 0x802, 0x4, 0x2, 0x9, 0x8, 0x7, 0x4, 0x5, 0x705, 0xffffffff, 0x1, 0x3, 0x0, 0xe, 0x5, 0x9, 0x9, 0x1, 0x5dcf10b0, 0xfffff075, 0x1, 0xe16, 0x6, 0xe, 0x7, 0x7fffffff, 0x7c, 0x0, 0x4, 0x9, 0x1d49cc9e, 0x5, 0xffff, 0xa93, 0xc, 0x2, 0xfffffff9, 0x5, 0x0, 0x0, 0x54, 0x100, 0x7, 0x1, 0x4000009, 0x1, 0xf, 0x62c4, 0xffff8001, 0x3, 0x6, 0x1, 0x9, 0x80, 0xc, 0x3ff3, 0x5], [0x5, 0x4, 0x0, 0x5, 0x8000, 0x9, 0x21, 0x8, 0xff, 0x4, 0x100001, 0x1200000, 0x71, 0x3, 0xa, 0xffff, 0xffff, 0x3, 0x9, 0x7, 0xfffffff7, 0x0, 0x6, 0xfffffffb, 0x7, 0x145, 0x8, 0x0, 0x6, 0x3ff, 0x2, 0x7, 0xe366, 0x2000000, 0x1, 0x400, 0x2, 0x0, 0x3, 0x8, 0x6, 0x5, 0x7, 0x5, 0x4, 0x7, 0x0, 0xa4, 0x5, 0xc, 0xfffc, 0x5, 0x1, 0xbf, 0x4, 0x5, 0x6, 0x8, 0x3, 0xfffffff0, 0x5, 0x6, 0x5, 0x4], [0x6, 0x2, 0x2, 0x1000, 0x81, 0x9, 0xa887, 0xf085, 0xa, 0xffffefff, 0x9, 0x897, 0xfffffff9, 0x81, 0x6cad, 0x8, 0x8, 0x99a, 0x8, 0x3, 0xffff, 0xb6c2, 0x8, 0x8, 0x10001, 0x2, 0x7, 0x3, 0x2, 0x3, 0x6c, 0xd49, 0xf, 0x401, 0x6, 0x0, 0x8, 0x0, 0x1, 0x3, 0x2, 0x1, 0x2, 0x2e3e1caa, 0x3, 0x800, 0x7fff, 0x0, 0x8001, 0x0, 0xee33, 0x3, 0x1, 0xa9e, 0xfffffffb, 0x7, 0xc, 0x0, 0x4, 0x5, 0xa, 0x4, 0x400], [0x4, 0x7, 0x7, 0xfffffff6, 0x6, 0x9, 0x8001, 0x6, 0x10001, 0x6, 0x2, 0x44, 0x10, 0x7, 0x8, 0xfe, 0x5e, 0x8, 0xeb, 0x4, 0x1, 0x9, 0xc, 0x3, 0x3, 0x3, 0x5, 0x24, 0x1, 0x6, 0x4, 0x81, 0x288, 0xfffffff8, 0x9, 0xacb, 0x8, 0xff, 0x2, 0xb5, 0x10, 0x11, 0x9, 0x8, 0x9cf, 0x0, 0x1, 0x8, 0xfffffc94, 0x3, 0x1e0d, 0x2a, 0x8, 0x8001, 0x447d, 0x9, 0x5, 0xa1d1, 0x8, 0x6, 0x7ff, 0xfff, 0x6, 0x3f6]}, 0x45c) 7.777354153s ago: executing program 0 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3e, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) 6.058085471s ago: executing program 0 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3789078569f0c107}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 6.057636831s ago: executing program 5 (id=2229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) 6.057346511s ago: executing program 2 (id=2230): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x62000115) 6.056504191s ago: executing program 4 (id=2231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc1, 0x0, 0x5}) 6.02174353s ago: executing program 5 (id=2232): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00007fd000/0x1000)=nil, 0x1000, 0x10) 5.999974025s ago: executing program 2 (id=2233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x7c}}, 0x0) 4.184314136s ago: executing program 0 (id=2234): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) 4.183803486s ago: executing program 5 (id=2235): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 4.183586436s ago: executing program 2 (id=2236): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_adj\x00') exit(0xfffffffffffffffb) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x3, 0x6) 3.991193632s ago: executing program 0 (id=2237): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0x0) ptrace$setopts(0x4200, r0, 0x7, 0x200009) 2.1068067s ago: executing program 0 (id=2238): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x20, 0x8, 0xa, {0xa, 0xe, "65d4454957dbb227"}}, 0x0}, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.10639188s ago: executing program 5 (id=2239): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.10626297s ago: executing program 2 (id=2240): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)={[{@lazytime}, {@minixdf}, {@quota}, {@errors_remount}, {@data_err_ignore}, {@i_version}, {@grpid}]}, 0x24, 0x76b, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40002, 0x1a6) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000fc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x20, 0x0}) 2.10618758s ago: executing program 4 (id=2241): syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000023000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.094627912s ago: executing program 5 (id=2242): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 68.436924ms ago: executing program 5 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) 67.480044ms ago: executing program 2 (id=2244): userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 67.349804ms ago: executing program 4 (id=2245): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) 38.358371ms ago: executing program 4 (id=2246): r0 = socket(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x20000000, @mcast2={0xff, 0x5}}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c) 37.156661ms ago: executing program 2 (id=2247): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b657400ad896f5339fe641665b5d5e7001400028008"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bf", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 4 (id=2248): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) kernel console output (not intermixed with test programs): socket permissive=1 [ 74.282937][ T3306] EXT4-fs (loop4): 1 truncate cleaned up [ 74.289891][ T3306] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 74.775012][ T3355] loop2: detected capacity change from 0 to 512 [ 74.997940][ T3373] loop2: detected capacity change from 0 to 1024 [ 75.032901][ T3373] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 75.067465][ T3379] device erspan0 entered promiscuous mode [ 75.083205][ T3373] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.132953][ T3373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 75.142393][ T3373] System zones: 0-1, 3-36 [ 75.163998][ T3373] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 75.210675][ T3373] incfs: ino conflict with backing FS 2 [ 75.318963][ T3393] loop3: detected capacity change from 0 to 2048 [ 75.352286][ T3395] loop2: detected capacity change from 0 to 512 [ 75.408033][ T3393] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.443246][ T3395] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1344: bg 0: block 5: invalid block bitmap [ 75.462161][ T3393] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.496209][ T3395] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.510020][ T3395] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1344: invalid indirect mapped block 3 (level 2) [ 75.532822][ T3395] EXT4-fs (loop2): 1 orphan inode deleted [ 75.540465][ T3395] EXT4-fs (loop2): 1 truncate cleaned up [ 75.554101][ T3395] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 75.711545][ T3414] smpboot: CPU 1 is now offline [ 75.766614][ T3416] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.825613][ T3423] netlink: 'syz.2.1354': attribute type 5 has an invalid length. [ 75.835134][ T3416] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 75.864594][ T3416] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.895708][ T3416] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.1350: bad orphan inode 15 [ 75.942944][ T3416] ext4_test_bit(bit=14, block=5) = 0 [ 75.954222][ T3429] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 75.978351][ T3416] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,dioread_nolock,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 76.019263][ T3429] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,dioread_lock,barrier=0x0000000000000007,nolazytime,quota,lazytime,errors=remount-ro,mblk_io_submit,noblock_validity,errors=remount-ro,. Quota mode: writeback. [ 76.106991][ T3416] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 76.153201][ T3439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.216083][ T3439] EXT4-fs (loop4): 1 truncate cleaned up [ 76.241450][ T3439] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 76.914871][ T3484] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1381'. [ 76.936251][ T3483] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 76.949628][ T3483] syzkaller1: linktype set to 780 [ 77.022034][ T3493] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.055954][ T3497] kvm [3496]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0x2000000 [ 77.197257][ T3523] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.257842][ T3526] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 77.279163][ T3526] FAT-fs (loop2): Filesystem has been set read-only [ 77.295334][ T3526] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 77.392242][ T3538] overlayfs: upper fs does not support tmpfile. [ 77.412778][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.502752][ T314] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 77.603486][ T3554] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.658144][ T3554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 77.667562][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 77.690726][ T3554] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 77.709788][ T3554] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 77.729415][ T3559] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 77.792781][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.825106][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.847835][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.874203][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.884552][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.912161][ T314] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 77.924867][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.951317][ T6] usb 5-1: config 0 descriptor?? [ 78.112758][ T314] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 78.126234][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.139918][ T314] usb 4-1: Product: syz [ 78.147457][ T314] usb 4-1: Manufacturer: syz [ 78.154735][ T314] usb 4-1: SerialNumber: syz [ 78.299063][ T3592] set_capacity_and_notify: 5 callbacks suppressed [ 78.299075][ T3592] loop2: detected capacity change from 0 to 512 [ 78.372984][ T3592] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 78.396062][ T3592] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1428: invalid indirect mapped block 256 (level 1) [ 78.424825][ T314] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 78.443300][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.460035][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.481854][ T3592] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1428: invalid indirect mapped block 2683928664 (level 1) [ 78.502257][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.523874][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.540336][ T3592] EXT4-fs (loop2): 1 truncate cleaned up [ 78.549778][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.566381][ T3592] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 78.598014][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.617331][ T6] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 78.638328][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 78.638341][ T30] audit: type=1400 audit(2000000035.800:485): avc: denied { read write } for pid=3528 comm="syz.3.1402" name="lp0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 78.689010][ T6] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 78.708490][ T6] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 78.733315][ T3592] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1428: Invalid block bitmap block 3 in block_group 0 [ 78.756331][ T6] microsoft 0003:045E:07DA.0012: no inputs found [ 78.776044][ T30] audit: type=1400 audit(2000000035.840:486): avc: denied { open } for pid=3528 comm="syz.3.1402" path="/dev/usb/lp0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 78.800331][ T6] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 78.809618][ T3592] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 78.837427][ T6] usb 5-1: USB disconnect, device number 8 [ 78.852919][ T3592] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1428: invalid indirect mapped block 1536 (level 1) [ 78.893044][ T314] usb 4-1: USB disconnect, device number 10 [ 78.914397][ T314] usblp0: removed [ 79.034922][ T30] audit: type=1400 audit(2000000036.200:487): avc: denied { read } for pid=3615 comm="syz.2.1438" path="socket:[28035]" dev="sockfs" ino=28035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.139959][ T30] audit: type=1400 audit(2000000036.250:488): avc: denied { shutdown } for pid=3617 comm="syz.2.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.225608][ T3638] loop4: detected capacity change from 0 to 256 [ 79.252183][ T30] audit: type=1400 audit(2000000036.300:489): avc: denied { mount } for pid=3621 comm="syz.0.1442" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.283034][ T3640] netlink: 'syz.1.1450': attribute type 34 has an invalid length. [ 79.415698][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 79.473347][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.519606][ T3663] loop4: detected capacity change from 0 to 256 [ 79.573270][ T3663] exfat: Deprecated parameter 'utf8' [ 79.604940][ T3663] exfat: Deprecated parameter 'utf8' [ 79.635558][ T3663] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 79.659092][ T30] audit: type=1400 audit(2000000036.820:490): avc: denied { write } for pid=3672 comm="syz.2.1464" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 79.770468][ T30] audit: type=1400 audit(2000000036.930:491): avc: denied { write } for pid=3684 comm="syz.1.1469" name="usb_gadget" dev="configfs" ino=13723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.815384][ T3690] netlink: 'syz.4.1470': attribute type 12 has an invalid length. [ 79.863419][ T3690] netlink: 'syz.4.1470': attribute type 29 has an invalid length. [ 79.902759][ T3690] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1470'. [ 79.921482][ T30] audit: type=1400 audit(2000000036.930:492): avc: denied { add_name } for pid=3684 comm="syz.1.1469" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.033307][ T30] audit: type=1400 audit(2000000036.930:493): avc: denied { create } for pid=3684 comm="syz.1.1469" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 80.134796][ T30] audit: type=1400 audit(2000000036.960:494): avc: denied { remove_name } for pid=3684 comm="syz.1.1469" name="g1" dev="configfs" ino=28315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.229544][ T3706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1478'. [ 80.361577][ T3700] loop2: detected capacity change from 0 to 40427 [ 80.393601][ T3712] loop4: detected capacity change from 0 to 8192 [ 80.416524][ T3700] F2FS-fs (loop2): invalid crc value [ 80.453195][ T3700] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.462966][ T3247] loop4: p1 p2 p3 p4 [ 80.472398][ T3247] loop4: p1 start 51379968 is beyond EOD, truncated [ 80.517359][ T3247] loop4: p3 size 100663552 extends beyond EOD, truncated [ 80.550731][ T3247] loop4: p4 size 81920 extends beyond EOD, truncated [ 80.578226][ T3700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.597295][ T3712] loop4: p1 p2 p3 p4 [ 80.606900][ T3712] loop4: p1 start 51379968 is beyond EOD, truncated [ 80.640473][ T3712] loop4: p3 size 100663552 extends beyond EOD, truncated [ 80.663262][ T3701] loop1: detected capacity change from 0 to 40427 [ 80.693926][ T288] attempt to access beyond end of device [ 80.693926][ T288] loop2: rw=2049, want=45104, limit=40427 [ 80.708417][ T3712] loop4: p4 size 81920 extends beyond EOD, truncated [ 80.762583][ T101] loop4: p1 p2 p3 p4 [ 80.769124][ T3731] loop3: detected capacity change from 0 to 512 [ 80.776998][ T101] loop4: p1 start 51379968 is beyond EOD, truncated [ 80.811997][ T3701] F2FS-fs (loop1): invalid crc value [ 80.833527][ T101] loop4: p3 size 100663552 extends beyond EOD, truncated [ 80.861406][ T101] loop4: p4 size 81920 extends beyond EOD, truncated [ 80.871850][ T3701] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.878387][ T6] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.896549][ T3731] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.982749][ T3731] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.099326][ T3701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.258255][ T3701] attempt to access beyond end of device [ 81.258255][ T3701] loop1: rw=2049, want=45104, limit=40427 [ 81.269645][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.296823][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.323653][ T3753] loop3: detected capacity change from 0 to 128 [ 81.332803][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.361487][ T285] attempt to access beyond end of device [ 81.361487][ T285] loop1: rw=2049, want=45112, limit=40427 [ 81.380332][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.391229][ T3753] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 81.415349][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.433099][ T3755] SELinux: failed to load policy [ 81.446455][ T6] usb 5-1: config 0 descriptor?? [ 81.676624][ T3776] sd 0:0:1:0: PR command failed: 2 [ 81.701391][ T3776] sd 0:0:1:0: Sense Key : 0x5 [current] [ 81.727076][ T3776] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 81.732771][ T314] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 81.825447][ T3786] loop1: detected capacity change from 0 to 2048 [ 81.899762][ T3786] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none. [ 81.933396][ T6] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 81.955332][ T6] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 82.036640][ T3786] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.103559][ T3786] fs-verity: sha512 using implementation "sha512-avx2" [ 82.140758][ T3786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1508: bg 0: block 345: padding at end of block bitmap is not set [ 82.162839][ T6] usb 5-1: USB disconnect, device number 9 [ 82.213331][ T3786] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 0 [ 82.242714][ T3786] fs-verity (loop1, inode 13): Error -28 building Merkle tree [ 82.272746][ T314] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 82.295109][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.309529][ T314] usb 4-1: Product: syz [ 82.318089][ T314] usb 4-1: Manufacturer: syz [ 82.336223][ T314] usb 4-1: SerialNumber: syz [ 82.342821][ T3181] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 82.403039][ T314] ums-karma 4-1:1.0: USB Mass Storage device detected [ 82.416112][ T3810] loop1: detected capacity change from 0 to 4096 [ 82.435270][ T314] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 82.435270][ T314] Please send a copy of this message to and [ 82.489132][ T3820] ip_tables: iptables: counters copy to user failed while replacing table [ 82.513483][ T3810] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000007fffffff,max_dir_size_kb=0x0000000000000008,nouid32,errors=remount-ro,nogrpid,init_itable=0x0000000000000004,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 82.659067][ T3810] fs-verity: sha256 using implementation "sha256-avx2" [ 82.703258][ T3810] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.1518: Failed to acquire dquot type 0 [ 82.722820][ T3181] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.747788][ T3181] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.776137][ T3810] EXT4-fs (loop1): Remounting filesystem read-only [ 82.783073][ T3181] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.815075][ T3840] SELinux: failed to load policy [ 82.834902][ T314] ums-karma: probe of 4-1:1.0 failed with error -5 [ 82.857142][ T314] usb 4-1: USB disconnect, device number 11 [ 82.963337][ T3855] exfat: Deprecated parameter 'utf8' [ 82.982511][ T3857] tap0: tun_chr_ioctl cmd 3225442364 [ 82.988123][ T3181] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 82.999673][ T3855] exfat: Deprecated parameter 'namecase' [ 83.014170][ T3181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 83.029310][ T3855] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 83.055835][ T3181] usb 3-1: Product: syz [ 83.060322][ T3181] usb 3-1: Manufacturer: syz [ 83.075747][ T3181] usb 3-1: SerialNumber: syz [ 83.312489][ T3884] set_capacity_and_notify: 1 callbacks suppressed [ 83.312502][ T3884] loop4: detected capacity change from 0 to 512 [ 83.353632][ T3181] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 83.413599][ T3895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.425227][ T3884] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.456620][ T3884] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.563155][ T3181] usb 3-1: USB disconnect, device number 6 [ 83.575793][ T3181] usblp0: removed [ 83.652638][ T3912] loop4: detected capacity change from 0 to 512 [ 83.702757][ T290] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 83.724163][ T3912] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.730949][ T3912] EXT4-fs (loop4): Ignoring removed oldalloc option [ 83.778680][ T3912] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 83.844669][ T3912] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 83.855174][ T3912] EXT4-fs (loop4): Online defrag not supported for encrypted files [ 83.943222][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 83.943233][ T30] audit: type=1400 audit(2000000041.110:500): avc: denied { rename } for pid=3886 comm="syz.0.1553" name="file0" dev="tmpfs" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.044146][ T3924] loop4: detected capacity change from 0 to 512 [ 84.094604][ T3924] EXT4-fs (loop4): Ignoring removed oldalloc option [ 84.122803][ T290] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 84.138369][ T3924] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1567: dx entry: limit 1024 != root limit 124 [ 84.161873][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.173795][ T30] audit: type=1400 audit(2000000041.340:501): avc: denied { write } for pid=3935 comm="syz.0.1573" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 84.199888][ T3924] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1567: Corrupt directory, running e2fsck is recommended [ 84.254029][ T3924] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 84.282642][ T3924] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.1567: corrupted in-inode xattr [ 84.316982][ T3947] loop1: detected capacity change from 0 to 256 [ 84.323800][ T3924] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1567: couldn't read orphan inode 15 (err -117) [ 84.354786][ T3924] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 84.438302][ T3924] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1567: dx entry: limit 1024 != root limit 124 [ 84.473057][ T290] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 84.480864][ T3924] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1567: Corrupt directory, running e2fsck is recommended [ 84.506368][ T290] usb 4-1: USB disconnect, device number 12 [ 84.618729][ T30] audit: type=1400 audit(2000000041.780:502): avc: denied { connect } for pid=3960 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.783798][ T3973] loop4: detected capacity change from 0 to 256 [ 84.813985][ T3973] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 84.853994][ T30] audit: type=1400 audit(2000000042.020:503): avc: denied { mounton } for pid=3972 comm="syz.4.1587" path="/269/dev/mnt" dev="loop4" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.016660][ T30] audit: type=1400 audit(2000000042.180:504): avc: denied { listen } for pid=3983 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.133879][ T3998] loop3: detected capacity change from 0 to 2048 [ 85.180456][ T3998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.213612][ T30] audit: type=1400 audit(2000000042.380:505): avc: denied { read } for pid=4007 comm="syz.2.1603" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.310036][ T4019] usb usb9: usbfs: process 4019 (syz.2.1608) did not claim interface 24 before use [ 85.334163][ T30] audit: type=1400 audit(2000000042.400:506): avc: denied { open } for pid=4007 comm="syz.2.1603" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.448691][ T4027] loop1: detected capacity change from 0 to 2048 [ 85.533581][ T4027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.552508][ T4042] loop3: detected capacity change from 0 to 512 [ 85.567186][ T4044] loop2: detected capacity change from 0 to 128 [ 85.591724][ T4042] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1618: invalid block [ 85.611561][ T4044] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 85.634087][ T4027] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.672844][ T4042] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1618: invalid indirect mapped block 4294967295 (level 1) [ 85.725002][ T4042] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1618: invalid indirect mapped block 4294967295 (level 1) [ 85.824974][ T4042] EXT4-fs (loop3): 2 truncates cleaned up [ 85.830895][ T4042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.863573][ T4056] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 85.913469][ T30] audit: type=1400 audit(2000000043.080:507): avc: denied { relabelto } for pid=4054 comm="syz.2.1622" name="file0" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 86.078840][ T4067] loop3: detected capacity change from 0 to 4096 [ 86.107015][ T30] audit: type=1400 audit(2000000043.110:508): avc: denied { associate } for pid=4054 comm="syz.2.1622" name="file0" dev="cgroup2" ino=169 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 86.183696][ T4067] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.190608][ T4067] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 86.247429][ T4067] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,test_dummy_encryption=v1,inlinecrypt,resgid=0x0000000000000000,noinit_itable,norecovery,nombcache,nodioread_nolock,errors=remount-ro,mblk_io_submit,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 86.304848][ T30] audit: type=1400 audit(2000000043.140:509): avc: denied { append } for pid=4041 comm="syz.3.1618" path="/308/file0/blkio.throttle.io_service_bytes" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.360852][ T4089] SELinux: policydb table sizes (-263996421,954280092) do not match mine (5,6) [ 86.416930][ T4089] SELinux: failed to load policy [ 86.456012][ T4096] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 86.872695][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.112710][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 87.133286][ T4144] xt_hashlimit: size too large, truncated to 1048576 [ 87.202022][ T4141] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.219694][ T4146] FAT-fs (loop4): Directory bread(block 64) failed [ 87.233321][ T4146] FAT-fs (loop4): Directory bread(block 65) failed [ 87.252778][ T6] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.274146][ T4146] FAT-fs (loop4): Directory bread(block 66) failed [ 87.292686][ T6] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.314871][ T4146] FAT-fs (loop4): Directory bread(block 67) failed [ 87.332024][ T4141] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 87.352778][ T4146] FAT-fs (loop4): Directory bread(block 68) failed [ 87.362868][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.377312][ T4146] FAT-fs (loop4): Directory bread(block 69) failed [ 87.387694][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 87.403993][ T4146] FAT-fs (loop4): Directory bread(block 70) failed [ 87.410709][ T4141] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 87.435923][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.444832][ T4146] FAT-fs (loop4): Directory bread(block 71) failed [ 87.462747][ T4141] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.462747][ T4141] [ 87.474400][ T4146] FAT-fs (loop4): Directory bread(block 72) failed [ 87.481291][ T4146] FAT-fs (loop4): Directory bread(block 73) failed [ 87.491668][ T6] usb 1-1: config 0 descriptor?? [ 87.518690][ T4141] EXT4-fs (loop3): Total free blocks count 0 [ 87.525560][ T4154] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 87.562932][ T4141] EXT4-fs (loop3): Free/Dirty block details [ 87.588768][ T4141] EXT4-fs (loop3): free_blocks=4096 [ 87.606705][ T4141] EXT4-fs (loop3): dirty_blocks=512 [ 87.638714][ T4141] EXT4-fs (loop3): Block reservation details [ 87.647385][ T4146] attempt to access beyond end of device [ 87.647385][ T4146] loop4: rw=2049, want=1352, limit=256 [ 87.668801][ T4141] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 87.692867][ T4146] attempt to access beyond end of device [ 87.692867][ T4146] loop4: rw=2049, want=1512, limit=256 [ 87.706107][ T4141] EXT4-fs error (device loop3) in ext4_setattr:5676: error 28 [ 87.756334][ T4146] attempt to access beyond end of device [ 87.756334][ T4146] loop4: rw=2049, want=1832, limit=256 [ 87.819967][ T4146] attempt to access beyond end of device [ 87.819967][ T4146] loop4: rw=2049, want=2332, limit=256 [ 87.875764][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 87.888639][ T4157] attempt to access beyond end of device [ 87.888639][ T4157] loop4: rw=2049, want=1232, limit=256 [ 87.984255][ T6] apple 0003:05AC:021C.0014: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 87.996396][ T4167] exfat: Unknown parameter 'K'y'\Y`HS*ZVbɆY\C`H۩QA$WhPb//Fȹs%&_̉ǡ-ul&&V֣B[/AǹGʥ' [ 88.019204][ T4145] attempt to access beyond end of device [ 88.019204][ T4145] loop4: rw=2049, want=1264, limit=256 [ 88.043695][ T6] input: HID 05ac:021c as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:021C.0014/input/input22 [ 88.145872][ T6] apple 0003:05AC:021C.0014: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:021c] on usb-dummy_hcd.0-1/input0 [ 88.158473][ T4173] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,usrjquota=,abort,noload,,errors=continue. Quota mode: none. [ 88.212940][ T4159] F2FS-fs (loop2): invalid crc value [ 88.226276][ T6] usb 1-1: USB disconnect, device number 8 [ 88.288326][ T4159] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 88.336872][ T4173] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.412762][ T4159] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.474236][ T288] attempt to access beyond end of device [ 88.474236][ T288] loop2: rw=2049, want=45104, limit=40427 [ 88.518014][ T4204] netlink: 'syz.3.1683': attribute type 12 has an invalid length. [ 88.554073][ T4204] netlink: 'syz.3.1683': attribute type 29 has an invalid length. [ 88.587229][ T4204] netlink: 'syz.3.1683': attribute type 7 has an invalid length. [ 88.618035][ T4204] netlink: 'syz.3.1683': attribute type 37 has an invalid length. [ 88.646485][ T4204] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1683'. [ 88.715502][ T4211] set_capacity_and_notify: 6 callbacks suppressed [ 88.715515][ T4211] loop2: detected capacity change from 0 to 1024 [ 88.806451][ T4219] loop3: detected capacity change from 0 to 256 [ 88.832596][ T4211] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.1682: bad orphan inode 134217728 [ 88.845050][ T4221] loop4: detected capacity change from 0 to 2048 [ 88.900929][ T4211] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.933220][ T4221] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.984312][ T4221] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.186380][ T4257] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1705'. [ 89.206105][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 89.206118][ T30] audit: type=1400 audit(2000000046.370:541): avc: denied { write } for pid=4258 comm="syz.2.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.264305][ T4263] loop4: detected capacity change from 0 to 512 [ 89.339242][ T4173] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 89.353813][ T4263] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 89.384680][ T4263] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.1708: corrupted in-inode xattr [ 89.400780][ T4276] xt_hashlimit: size too large, truncated to 1048576 [ 89.441255][ T4263] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1708: couldn't read orphan inode 15 (err -117) [ 89.502931][ T4263] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 89.929016][ T4308] loop2: detected capacity change from 0 to 1024 [ 89.936632][ T3181] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.969863][ T4308] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.103403][ T4319] loop2: detected capacity change from 0 to 16 [ 90.124904][ T4319] erofs: (device loop2): mounted with root inode @ nid 36. [ 90.182743][ T3181] usb 5-1: Using ep0 maxpacket: 32 [ 90.312707][ T3181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 90.324203][ T3181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 10 [ 90.336541][ T3181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 90.502741][ T3181] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 90.512518][ T3181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.520806][ T3181] usb 5-1: Product: syz [ 90.525274][ T3181] usb 5-1: Manufacturer: syz [ 90.530022][ T3181] usb 5-1: SerialNumber: syz [ 90.538237][ T3181] usb 5-1: config 0 descriptor?? [ 90.583542][ T3181] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 90.602346][ T3181] kernel read not supported for file /bus/input/devices (pid: 3181 comm: kworker/0:4) [ 90.668966][ T4333] loop2: detected capacity change from 0 to 512 [ 90.704384][ T4333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.730114][ T4333] EXT4-fs (loop2): 1 truncate cleaned up [ 90.741450][ T4333] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 90.799093][ T3181] usb 5-1: USB disconnect, device number 10 [ 90.827657][ T4338] loop2: detected capacity change from 0 to 256 [ 91.179430][ T4364] ------------[ cut here ]------------ [ 91.197503][ T4364] trace type BPF program uses run-time allocation [ 91.222745][ T4364] WARNING: CPU: 0 PID: 4364 at kernel/bpf/verifier.c:11749 check_map_prog_compatibility+0x6cc/0x870 [ 91.245810][ T4364] Modules linked in: [ 91.254691][ T4364] CPU: 0 PID: 4364 Comm: syz.3.1752 Not tainted syzkaller #0 [ 91.270665][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.304381][ T4364] RIP: 0010:check_map_prog_compatibility+0x6cc/0x870 [ 91.330045][ T4364] Code: ee ff 48 c7 c6 a0 5c 48 85 4c 8b 65 d0 e9 f9 fc ff ff e8 87 24 ee ff c6 05 f8 80 6a 05 01 48 c7 c7 00 59 48 85 e8 64 e9 2f 03 <0f> 0b e9 83 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f9 ff [ 91.364758][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 91.376702][ T4371] loop2: detected capacity change from 0 to 4096 [ 91.392224][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1756'. [ 91.411739][ T4371] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.430350][ T4364] RSP: 0018:ffffc90000d27450 EFLAGS: 00010246 [ 91.450590][ T4364] RAX: 570c7f7779b02e00 RBX: 0000000000000001 RCX: 0000000000080000 [ 91.492121][ T4364] RDX: ffffc900033b3000 RSI: 00000000000035a2 RDI: 00000000000035a3 [ 91.533231][ T4364] RBP: ffffc90000d27490 R08: ffff8881f7032eff R09: 1ffff1103ee065df [ 91.600568][ T4364] R10: dffffc0000000000 R11: ffffed103ee065e0 R12: ffff88813b69c000 [ 91.637922][ T4364] R13: 0000000000000005 R14: dffffc0000000000 R15: ffff888110beb000 [ 91.646947][ T4386] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1762'. [ 91.670931][ T4364] FS: 00007fc7351be6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 91.705629][ T4364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.732623][ T4364] CR2: 0000200000000000 CR3: 000000013b6da000 CR4: 00000000003506b0 [ 91.763897][ T4364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.772797][ T3181] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.802762][ T4364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.840314][ T4364] Call Trace: [ 91.855961][ T4364] [ 91.870643][ T4364] resolve_pseudo_ldimm64+0x617/0x10f0 [ 91.892742][ T4364] ? check_attach_btf_id+0xd80/0xd80 [ 91.901787][ T4402] loop2: detected capacity change from 0 to 512 [ 91.921982][ T4364] ? __mark_reg_known+0x1b0/0x1b0 [ 91.952873][ T4364] ? security_capable+0x87/0xb0 [ 91.970898][ T4364] bpf_check+0x2cfc/0xf750 [ 91.988359][ T4364] ? is_bpf_text_address+0x177/0x190 [ 91.994758][ T4402] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 92.021961][ T4402] System zones: 0-2, 18-18, 34-35 [ 92.037584][ T4364] ? is_bpf_text_address+0x177/0x190 [ 92.045334][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,debug,usrquota,lazytime,,errors=continue. Quota mode: writeback. [ 92.070075][ T4364] ? bpf_get_btf_vmlinux+0x70/0x70 [ 92.075410][ T4364] ? unwind_get_return_address+0x4d/0x90 [ 92.091479][ T4364] ? stack_trace_save+0xf0/0xf0 [ 92.096794][ T4402] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.118256][ T4364] ? arch_stack_walk+0xee/0x140 [ 92.128355][ T4364] ? stack_trace_save+0xa6/0xf0 [ 92.142805][ T3181] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.153881][ T4364] ? __stack_depot_save+0x34/0x480 [ 92.159776][ T4364] ? __kasan_slab_alloc+0x69/0xe0 [ 92.182842][ T4364] ? __kasan_kmalloc+0xe6/0x100 [ 92.199526][ T4364] ? __kasan_kmalloc+0xd4/0x100 [ 92.208351][ T4364] ? kmem_cache_alloc_trace+0x119/0x270 [ 92.223098][ T4364] ? selinux_bpf_prog_alloc+0x51/0x140 [ 92.232889][ T290] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 92.242150][ T4364] ? security_bpf_prog_alloc+0x62/0x90 [ 92.248238][ T4364] ? bpf_prog_load+0x9d4/0x1620 [ 92.262868][ T4364] ? __sys_bpf+0x51d/0x7d0 [ 92.272858][ T4364] ? __x64_sys_bpf+0x7c/0x90 [ 92.282923][ T4364] ? x64_sys_call+0x4b9/0x9a0 [ 92.287624][ T4364] ? do_syscall_64+0x4c/0xa0 [ 92.302543][ T4364] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.322755][ T3181] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 92.331881][ T3181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.340593][ T4364] ? check_stack_object+0x81/0x150 [ 92.345936][ T4364] ? memset+0x35/0x40 [ 92.350019][ T4364] ? bpf_obj_name_cpy+0x193/0x1e0 [ 92.355549][ T3181] usb 5-1: Product: syz [ 92.359797][ T3181] usb 5-1: Manufacturer: syz [ 92.367361][ T4364] bpf_prog_load+0x10c5/0x1620 [ 92.372335][ T4364] ? __anon_inode_getfd+0x35c/0x3d0 [ 92.398012][ T3181] usb 5-1: SerialNumber: syz [ 92.403705][ T4364] ? map_freeze+0x370/0x370 [ 92.428840][ T4364] ? selinux_bpf+0xc7/0xf0 [ 92.443726][ T4414] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.1774: bad orphan inode 134217728 [ 92.457064][ T3181] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 92.464191][ T4364] ? security_bpf+0x82/0xa0 [ 92.492748][ T4364] __sys_bpf+0x51d/0x7d0 [ 92.497111][ T4364] ? bpf_link_show_fdinfo+0x330/0x330 [ 92.532807][ T4364] ? __kasan_check_write+0x14/0x20 [ 92.538513][ T4364] ? switch_fpu_return+0x15d/0x2c0 [ 92.544090][ T4414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.569016][ T4364] __x64_sys_bpf+0x7c/0x90 [ 92.585963][ T4364] x64_sys_call+0x4b9/0x9a0 [ 92.590600][ T4364] do_syscall_64+0x4c/0xa0 [ 92.612821][ T290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.628298][ T4364] ? clear_bhb_loop+0x50/0xa0 [ 92.638400][ T4364] ? clear_bhb_loop+0x50/0xa0 [ 92.644794][ T290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.662897][ T30] audit: type=1400 audit(2000000049.830:542): avc: denied { read write } for pid=4377 comm="syz.4.1760" name="cdc-wdm0" dev="devtmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 92.692738][ T4364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.709595][ T3181] usb 5-1: USB disconnect, device number 11 [ 92.719404][ T4364] RIP: 0033:0x7fc736765159 [ 92.742858][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.783031][ T290] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.797684][ T30] audit: type=1400 audit(2000000049.850:543): avc: denied { open } for pid=4377 comm="syz.4.1760" path="/dev/cdc-wdm0" dev="devtmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 92.823548][ T290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.831562][ T290] usb 1-1: SerialNumber: syz [ 92.853627][ T4364] RSP: 002b:00007fc7351be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.909632][ T4364] RAX: ffffffffffffffda RBX: 00007fc7369ecfa0 RCX: 00007fc736765159 [ 92.949704][ T30] audit: type=1400 audit(2000000050.090:544): avc: denied { read } for pid=4422 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.979468][ T4364] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 93.035755][ T4364] RBP: 00007fc7367fc06b R08: 0000000000000000 R09: 0000000000000000 [ 93.084620][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.123678][ T30] audit: type=1400 audit(2000000050.090:545): avc: denied { open } for pid=4422 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.152263][ T290] usb 1-1: 0:2 : does not exist [ 93.169630][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noinit_itable,,errors=continue. Quota mode: writeback. [ 93.199553][ T4364] R13: 00007fc7369ed038 R14: 00007fc7369ecfa0 R15: 00007ffc3eaa54f8 [ 93.220527][ T290] usb 1-1: USB disconnect, device number 9 [ 93.261850][ T4364] [ 93.286812][ T4364] ---[ end trace 85bcccea76d0b0e8 ]--- [ 93.298411][ T308] device bridge_slave_1 left promiscuous mode [ 93.335684][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.375181][ T30] audit: type=1400 audit(2000000050.090:546): avc: denied { getattr } for pid=4422 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.432095][ T308] device bridge_slave_0 left promiscuous mode [ 93.439316][ T4456] erofs: Unknown parameter '0000000000000000000000300000000000000000003' [ 93.483020][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.531065][ T308] device veth1_macvtap left promiscuous mode [ 93.564974][ T308] device veth0_vlan left promiscuous mode [ 93.581971][ T30] audit: type=1400 audit(2000000050.270:547): avc: denied { mounton } for pid=4435 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 93.730680][ T30] audit: type=1400 audit(2000000050.320:548): avc: denied { write } for pid=4421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.765526][ T4481] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nobarrier,noinit_itable,,errors=continue. Quota mode: none. [ 93.865340][ T4481] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 93.874878][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.900977][ T30] audit: type=1400 audit(2000000050.320:549): avc: denied { add_name } for pid=4421 comm="dhcpcd-run-hook" name="resolv.conf.wg2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.934861][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.961352][ T4435] device bridge_slave_0 entered promiscuous mode [ 93.989367][ T4497] set_capacity_and_notify: 4 callbacks suppressed [ 93.989380][ T4497] loop3: detected capacity change from 0 to 512 [ 94.019663][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.047894][ T30] audit: type=1400 audit(2000000050.360:550): avc: denied { remove_name } for pid=4441 comm="rm" name="resolv.conf.wg2.link" dev="tmpfs" ino=3907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.075587][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.103450][ T4494] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 94.123442][ T4497] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 94.146315][ T4435] device bridge_slave_1 entered promiscuous mode [ 94.200254][ T4497] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 94.284989][ T30] audit: type=1400 audit(2000000050.580:551): avc: denied { map } for pid=4455 comm="syz.3.1787" path="socket:[31856]" dev="sockfs" ino=31856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.312830][ T4497] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.442746][ T30] audit: type=1400 audit(2000000050.810:552): avc: denied { ioctl } for pid=4476 comm="syz.3.1793" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.517166][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.554091][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.614209][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.647894][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.690340][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.739973][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.749006][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.805247][ T4501] loop2: detected capacity change from 0 to 40427 [ 94.832748][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.849798][ T4501] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 94.862757][ T290] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 94.878172][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.906206][ T4501] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 94.935196][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.943248][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.962760][ T4501] F2FS-fs (loop2): invalid crc value [ 94.991319][ T4501] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 95.012790][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.031389][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.063963][ T4435] device veth0_vlan entered promiscuous mode [ 95.080335][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.102864][ T4501] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 95.110188][ T4501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.127379][ T4509] loop4: detected capacity change from 0 to 40427 [ 95.136005][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.172290][ T4435] device veth1_macvtap entered promiscuous mode [ 95.188669][ T4509] F2FS-fs (loop4): invalid crc value [ 95.224245][ T30] audit: type=1400 audit(2000000052.390:553): avc: denied { create } for pid=4524 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.247127][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.259176][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.269250][ T4509] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.282946][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.306827][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.322101][ T8] attempt to access beyond end of device [ 95.322101][ T8] loop2: rw=2049, want=45104, limit=40427 [ 95.333967][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.342556][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.361166][ T290] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 95.374274][ T30] audit: type=1400 audit(2000000052.430:554): avc: denied { write } for pid=4524 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.401052][ T4509] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 95.422310][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.444491][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.478125][ T290] usb 4-1: config 0 descriptor?? [ 95.495341][ T30] audit: type=1400 audit(2000000052.430:555): avc: denied { nlmsg_write } for pid=4524 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.533783][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.543436][ T4525] attempt to access beyond end of device [ 95.543436][ T4525] loop4: rw=2049, want=45104, limit=40427 [ 95.572966][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.612101][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.652223][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.690220][ T30] audit: type=1400 audit(2000000052.850:556): avc: denied { mounton } for pid=4435 comm="syz-executor" path="/root/syzkaller.5f5vKr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.720740][ T4541] pimreg0: tun_chr_ioctl cmd 35111 [ 95.993382][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.023218][ T4564] x86: Booting SMP configuration: [ 96.028328][ T4564] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 96.035568][ T0] kvm-clock: cpu 1, msr 70c6041, secondary cpu clock [ 96.036911][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 96.039848][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.099869][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.120230][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.140912][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.160485][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.176485][ T290] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 96.193723][ T290] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 96.241094][ T4509] F2FS-fs (loop4): Start checkpoint disabled! [ 96.458170][ T290] usb 4-1: USB disconnect, device number 13 [ 96.663776][ T4606] loop2: detected capacity change from 0 to 16 [ 96.694249][ T4606] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.723516][ T4606] attempt to access beyond end of device [ 96.723516][ T4606] loop2: rw=0, want=40, limit=16 [ 96.753864][ T4606] attempt to access beyond end of device [ 96.753864][ T4606] loop2: rw=524288, want=48, limit=16 [ 96.776416][ T4606] attempt to access beyond end of device [ 96.776416][ T4606] loop2: rw=524288, want=40, limit=16 [ 96.976521][ T4629] loop3: detected capacity change from 0 to 512 [ 96.979678][ T4627] loop2: detected capacity change from 0 to 512 [ 97.001838][ T4629] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1853: Attempting to read directory block (0) that is past i_size (16) [ 97.093698][ T4629] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 97.122525][ T4629] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,auto_da_alloc,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 97.194880][ T4591] loop5: detected capacity change from 0 to 131072 [ 97.204194][ T30] audit: type=1400 audit(2000000060.364:557): avc: denied { setopt } for pid=4633 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.213715][ T4629] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1853: Attempting to read directory block (0) that is past i_size (16) [ 97.238315][ T30] audit: type=1400 audit(2000000060.364:558): avc: denied { read } for pid=4633 comm="syz.2.1855" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.264745][ T4591] F2FS-fs (loop5): invalid crc value [ 97.269625][ T4636] loop4: detected capacity change from 0 to 512 [ 97.279843][ T4629] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1853: Attempting to read directory block (0) that is past i_size (16) [ 97.302246][ T4591] F2FS-fs (loop5): Found nat_bits in checkpoint [ 97.349270][ T4591] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 97.362365][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.389674][ T4636] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.399364][ T4591] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 97.474425][ T4658] loop4: detected capacity change from 0 to 512 [ 97.525075][ T4658] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 97.547728][ T30] audit: type=1400 audit(2000000060.704:559): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 97.584206][ T4665] process 'syz.3.1868' launched './file0' with NULL argv: empty string added [ 97.605756][ T30] audit: type=1400 audit(2000000060.764:560): avc: denied { execute } for pid=4664 comm="syz.3.1868" name="file0" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.632503][ T4658] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.649204][ T4658] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 97.678391][ T4658] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 97.687810][ T4658] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1863: bad orphan inode 768 [ 97.725872][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback. [ 97.938131][ T4687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=4687 comm=syz.5.1878 [ 97.981118][ T4687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4687 comm=syz.5.1878 [ 98.074716][ T4694] loop4: detected capacity change from 0 to 8192 [ 98.095512][ T4694] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.167245][ T4704] EXT4-fs (loop5): Ignoring removed bh option [ 98.248059][ T4704] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,dioread_lock,nodioread_nolock,nodelalloc,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 98.289623][ T4704] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 98.307346][ T4713] exfat: Deprecated parameter 'utf8' [ 98.353163][ T4713] exfat: Deprecated parameter 'utf8' [ 98.358640][ T4713] exfat: Deprecated parameter 'namecase' [ 98.413704][ T4717] binder: 4716:4717 ioctl c018620c 200000000100 returned -22 [ 98.427695][ T4713] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 98.554605][ T4681] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 98.569599][ T4681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 98.594432][ T4681] F2FS-fs (loop3): invalid crc value [ 98.595050][ T4734] SELinux: failed to load policy [ 98.636458][ T4681] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 98.753565][ T4681] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 98.760732][ T4681] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.874481][ T4681] attempt to access beyond end of device [ 98.874481][ T4681] loop3: rw=10241, want=53256, limit=40427 [ 98.919845][ T4758] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.932830][ T4758] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.986237][ T4738] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 99.016059][ T4758] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz.4.1907: Directory block failed checksum [ 99.044000][ T4738] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 99.053582][ T289] attempt to access beyond end of device [ 99.053582][ T289] loop3: rw=2049, want=45104, limit=40427 [ 99.083447][ T4738] F2FS-fs (loop5): invalid crc value [ 99.090010][ T4738] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 99.192771][ T4738] F2FS-fs (loop5): Start checkpoint disabled! [ 99.232720][ T4738] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 99.239849][ T4738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 99.403133][ T308] attempt to access beyond end of device [ 99.403133][ T308] loop5: rw=2049, want=45104, limit=40427 [ 99.617969][ T4700] set_capacity_and_notify: 5 callbacks suppressed [ 99.617987][ T4700] loop2: detected capacity change from 0 to 131072 [ 99.668415][ T4700] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 99.695557][ T4700] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.723075][ T4783] device batadv_slave_0 entered promiscuous mode [ 99.730721][ T4700] F2FS-fs (loop2): invalid crc value [ 99.740553][ T4782] device batadv_slave_0 left promiscuous mode [ 99.771287][ T4700] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.778087][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 99.778104][ T30] audit: type=1400 audit(2000000062.934:567): avc: denied { execmem } for pid=4787 comm="syz.5.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 99.914372][ T4700] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.921561][ T4700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 100.686400][ T4810] loop5: detected capacity change from 0 to 512 [ 100.745040][ T4772] loop4: detected capacity change from 0 to 131072 [ 100.760925][ T4810] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1929: missing EA_INODE flag [ 100.813561][ T4772] F2FS-fs (loop4): Zoned block device path is missing [ 100.820490][ T4772] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.829963][ T4810] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1929: error while reading EA inode 2 err=-117 [ 100.835835][ T4778] loop3: detected capacity change from 0 to 131072 [ 100.882695][ T4772] F2FS-fs (loop4): invalid crc value [ 100.892662][ T4810] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.1929: inode #3584: comm syz.5.1929: iget: illegal inode # [ 100.910425][ T4778] F2FS-fs (loop3): Test dummy encryption mode enabled [ 100.930732][ T4778] F2FS-fs (loop3): invalid crc value [ 100.960884][ T4778] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.981064][ T4772] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.000944][ T4778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.020805][ T4810] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1929: error while reading EA inode 3584 err=-117 [ 101.052517][ T4837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1937'. [ 101.072099][ T4810] EXT4-fs (loop5): 1 orphan inode deleted [ 101.093799][ T4810] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 101.112519][ T4772] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.123898][ T4772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 101.159750][ T30] audit: type=1400 audit(2000000064.314:568): avc: denied { mounton } for pid=4850 comm="syz.2.1942" path="/464/bus" dev="tmpfs" ino=2448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.198385][ T4772] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=60003, run fsck to fix. [ 101.222708][ T30] audit: type=1400 audit(2000000064.324:569): avc: denied { rename } for pid=4809 comm="syz.5.1929" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.259504][ T4772] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 101.359695][ T30] audit: type=1400 audit(2000000064.324:570): avc: denied { unlink } for pid=4809 comm="syz.5.1929" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.408416][ T4864] loop5: detected capacity change from 0 to 512 [ 101.419613][ T4864] EXT4-fs (loop5): Test dummy encryption mode enabled [ 101.427340][ T4864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.439955][ T4864] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.1949: bad orphan inode 131083 [ 101.450887][ T4864] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 104.438065][ T30] audit: type=1400 audit(2000000067.594:571): avc: denied { read } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.479268][ T30] audit: type=1400 audit(2000000067.624:572): avc: denied { open } for pid=4435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.505781][ T30] audit: type=1400 audit(2000000067.624:573): avc: denied { ioctl } for pid=4435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.531505][ T30] audit: type=1400 audit(2000000067.634:574): avc: denied { map_create } for pid=4881 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.571072][ T30] audit: type=1400 audit(2000000067.634:575): avc: denied { perfmon } for pid=4881 comm="syz.5.1956" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.658090][ T4900] loop4: detected capacity change from 0 to 256 [ 104.668804][ T30] audit: type=1400 audit(2000000067.634:576): avc: denied { map_read map_write } for pid=4881 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.755570][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 104.828691][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 104.828706][ T30] audit: type=1400 audit(2000000067.984:598): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 104.906512][ T30] audit: type=1400 audit(2000000068.064:599): avc: denied { mount } for pid=4925 comm="syz.4.1972" name="/" dev="incremental-fs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.972876][ T30] audit: type=1400 audit(2000000068.104:600): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.034076][ T30] audit: type=1400 audit(2000000068.154:601): avc: denied { read } for pid=4931 comm="syz.5.1976" dev="nsfs" ino=4026532449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.083291][ T30] audit: type=1400 audit(2000000068.154:602): avc: denied { open } for pid=4931 comm="syz.5.1976" path="net:[4026532449]" dev="nsfs" ino=4026532449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.147368][ T30] audit: type=1400 audit(2000000068.154:603): avc: denied { create } for pid=4931 comm="syz.5.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.154196][ T4946] netlink: 'syz.3.1982': attribute type 8 has an invalid length. [ 105.205790][ T30] audit: type=1400 audit(2000000068.164:604): avc: denied { create } for pid=4934 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.249300][ T4951] loop9: detected capacity change from 0 to 7 [ 105.266088][ T30] audit: type=1400 audit(2000000068.164:605): avc: denied { write } for pid=4934 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.290322][ T308] loop: Write error at byte offset 1, length 3584. [ 105.303063][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 105.313414][ T30] audit: type=1400 audit(2000000068.164:606): avc: denied { nlmsg_write } for pid=4934 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.314381][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 105.362739][ T30] audit: type=1400 audit(2000000068.164:607): avc: denied { create } for pid=4933 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.440333][ T4960] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 105.616785][ T4989] zero sized request [ 105.754299][ T5006] loop3: detected capacity change from 0 to 256 [ 105.821465][ T5013] loop5: detected capacity change from 0 to 2048 [ 105.874438][ T5013] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.886402][ T5013] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.010742][ T5020] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2011: bg 0: block 345: padding at end of block bitmap is not set [ 106.038723][ T5020] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 106.062676][ T5020] EXT4-fs (loop5): This should not happen!! Data will be lost [ 106.062676][ T5020] [ 106.073541][ T45] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 106.096207][ T45] EXT4-fs (loop5): This should not happen!! Data will be lost [ 106.096207][ T45] [ 106.116374][ T45] EXT4-fs (loop5): Total free blocks count 0 [ 106.130338][ T45] EXT4-fs (loop5): Free/Dirty block details [ 106.147365][ T45] EXT4-fs (loop5): free_blocks=0 [ 106.157951][ T45] EXT4-fs (loop5): dirty_blocks=1200 [ 106.169104][ T45] EXT4-fs (loop5): Block reservation details [ 106.181971][ T45] EXT4-fs (loop5): i_reserved_data_blocks=75 [ 106.238816][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 106.249667][ T5029] loop3: detected capacity change from 0 to 2048 [ 106.324493][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,usrjquota=,abort,noload,,errors=continue. Quota mode: none. [ 106.339388][ T5029] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.389151][ T5038] loop5: detected capacity change from 0 to 512 [ 106.719484][ T5029] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 932128 [ 106.735706][ T5074] loop4: detected capacity change from 0 to 256 [ 106.752687][ T5029] fs-verity (loop3, inode 13): Error -28 building Merkle tree [ 106.772740][ T63] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.026963][ T5078] loop3: detected capacity change from 0 to 512 [ 107.067846][ T5078] EXT4-fs (loop3): Ignoring removed orlov option [ 107.113961][ T5078] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue. Quota mode: writeback. [ 107.130515][ T5078] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.142783][ T63] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 107.153717][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.165813][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.175958][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 107.189663][ T63] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 107.212669][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.235559][ T63] usb 3-1: config 0 descriptor?? [ 107.283778][ T5076] loop4: detected capacity change from 0 to 40427 [ 107.338050][ T5084] loop3: detected capacity change from 0 to 4096 [ 107.398093][ T5076] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 107.408373][ T5076] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.435050][ T5068] F2FS-fs (loop5): invalid crc value [ 107.435053][ T5076] F2FS-fs (loop4): invalid crc value [ 107.435875][ T5076] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 107.472781][ T5084] EXT4-fs (loop3): Ignoring removed bh option [ 107.493916][ T5068] F2FS-fs (loop5): Found nat_bits in checkpoint [ 107.534303][ T5084] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,dioread_lock,nodioread_nolock,nodelalloc,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 107.572790][ T5068] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 107.622925][ T5068] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 107.631713][ T5076] F2FS-fs (loop4): Start checkpoint disabled! [ 107.674587][ T5076] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.682448][ T5076] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 107.693867][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.711968][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.740708][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.758640][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.776409][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.789223][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.817236][ T63] holtek_kbd 0003:04D9:A055.0016: unknown main item tag 0x0 [ 107.825641][ T8] attempt to access beyond end of device [ 107.825641][ T8] loop4: rw=2049, want=45104, limit=40427 [ 107.843185][ T63] holtek_kbd 0003:04D9:A055.0016: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 107.895778][ T63] usb 3-1: USB disconnect, device number 7 [ 107.965519][ T5095] fido_id[5095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.089531][ T8] blk_update_request: I/O error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 108.101302][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 145447) [ 108.113033][ T8] Buffer I/O error on device sda1, logical block 145408 [ 108.120034][ T8] blk_update_request: I/O error, dev sda, sector 1171750 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 108.131713][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146469) [ 108.143540][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146470) [ 108.155324][ T8] blk_update_request: I/O error, dev sda, sector 1175662 op 0x1:(WRITE) flags 0x0 phys_seg 20 prio class 0 [ 108.167346][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146961) [ 108.179212][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146982) [ 108.182786][ T308] Buffer I/O error on device sda1, logical block 146430 [ 108.191366][ T8] blk_update_request: I/O error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 108.209828][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 147495) [ 108.218971][ T308] Buffer I/O error on device sda1, logical block 146919 [ 108.221618][ T8] Buffer I/O error on device sda1, logical block 147456 [ 108.235605][ T8] blk_update_request: I/O error, dev sda, sector 1188142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 108.240531][ T308] Buffer I/O error on device sda1, logical block 146920 [ 108.246959][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 148518) [ 108.265811][ T8] Buffer I/O error on device sda1, logical block 148479 [ 108.272855][ T8] blk_update_request: I/O error, dev sda, sector 1192190 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 108.284204][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 149030) [ 108.289589][ T308] Buffer I/O error on device sda1, logical block 146921 [ 108.296288][ T8] Buffer I/O error on device sda1, logical block 148985 [ 108.311000][ T8] Buffer I/O error on device sda1, logical block 148986 [ 108.318350][ T8] Buffer I/O error on device sda1, logical block 148987 [ 108.325383][ T8] blk_update_request: I/O error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 108.332668][ T306] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 108.336832][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 149543) [ 108.356172][ T8] blk_update_request: I/O error, dev sda, sector 1204526 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 108.367648][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 150566) [ 108.379336][ T8] blk_update_request: I/O error, dev sda, sector 1208438 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 0 [ 108.712258][ T5105] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 108.721579][ T5105] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 108.723131][ T64] Buffer I/O error on dev sda1, logical block 131305, lost sync page write [ 108.730206][ T5105] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 108.739409][ T64] Aborting journal on device sda1-8. [ 108.747346][ T5105] Buffer I/O error on dev sda1, logical block 152, lost async page write [ 108.757347][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 108.761214][ T5105] Buffer I/O error on dev sda1, logical block 156, lost async page write [ 108.772849][ T5086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2039: Detected aborted journal [ 108.781076][ T5105] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 108.801067][ T5105] Buffer I/O error on dev sda1, logical block 161, lost async page write [ 108.809842][ T5105] Buffer I/O error on dev sda1, logical block 162, lost async page write [ 108.819305][ T306] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.842676][ T306] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.849504][ T306] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 108.857105][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 108.858791][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.881873][ T306] usb 4-1: config 0 descriptor?? [ 108.903337][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 108.910445][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 108.917839][ T5086] EXT4-fs (sda1): I/O error while writing superblock [ 108.925760][ T5104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2045: Detected aborted journal [ 108.944123][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 108.955670][ T5086] EXT4-fs (sda1): Remounting filesystem read-only [ 108.975725][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 108.982686][ T5104] EXT4-fs (sda1): previous I/O error to superblock detected [ 108.985702][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 109.007014][ T5104] EXT4-fs (sda1): I/O error while writing superblock [ 109.017520][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 109.024377][ T5104] EXT4-fs (sda1): Remounting filesystem read-only [ 109.042690][ T5105] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 109.049277][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 109.049380][ T5104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2045: Detected aborted journal [ 109.071906][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 109.072740][ T5113] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2047: Detected aborted journal [ 109.102740][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 109.126984][ T5113] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2047: Detected aborted journal [ 109.168345][ T5116] sch_fq: defrate 0 ignored. [ 109.347159][ T306] cypress 0003:04B4:DE61.0017: hidraw0: USB HID v10.01 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 109.401457][ T5125] udevd[5125]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 109.411756][ T5122] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,usrjquota=,abort,noload,,errors=continue. Quota mode: none. [ 109.456681][ T5122] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.580244][ T3181] usb 4-1: USB disconnect, device number 14 [ 109.825800][ T5143] set_capacity_and_notify: 4 callbacks suppressed [ 109.825818][ T5143] loop2: detected capacity change from 0 to 256 [ 109.878921][ T5122] fs-verity (loop5, inode 13): Error -28 writing Merkle tree block 932128 [ 109.887657][ T5122] fs-verity (loop5, inode 13): Error -28 building Merkle tree [ 109.902322][ T5143] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 109.922733][ T63] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 109.951487][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 109.951504][ T30] audit: type=1400 audit(2000000073.104:686): avc: denied { write } for pid=5142 comm="syz.2.2069" name="file1" dev="loop2" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.984187][ T5143] attempt to access beyond end of device [ 109.984187][ T5143] loop2: rw=2049, want=4282, limit=256 [ 110.023342][ T30] audit: type=1400 audit(2000000073.144:687): avc: denied { open } for pid=5142 comm="syz.2.2069" name="file1" dev="loop2" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.084945][ T30] audit: type=1400 audit(2000000073.144:688): avc: denied { read } for pid=5142 comm="syz.2.2069" name="file1" dev="loop2" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.132719][ T30] audit: type=1400 audit(2000000073.274:689): avc: denied { block_suspend } for pid=5148 comm="syz.3.2062" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.201850][ T5157] loop3: detected capacity change from 0 to 512 [ 110.221687][ T5159] loop5: detected capacity change from 0 to 512 [ 110.244717][ T5157] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.264216][ T30] audit: type=1400 audit(2000000073.424:690): avc: denied { create } for pid=5160 comm="syz.4.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.265771][ T5161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2067'. [ 110.302732][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.321499][ T5157] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 110.335563][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 110.337809][ T63] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.357348][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.366302][ T30] audit: type=1400 audit(2000000073.424:691): avc: denied { write } for pid=5160 comm="syz.4.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.366560][ T63] usb 1-1: config 0 descriptor?? [ 110.383039][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 110.412739][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 110.442751][ T5159] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 110.475712][ T5159] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.654028][ T30] audit: type=1400 audit(2000000073.814:692): avc: denied { read } for pid=5176 comm="syz.3.2074" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.705171][ T30] audit: type=1400 audit(2000000073.814:693): avc: denied { open } for pid=5176 comm="syz.3.2074" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.757014][ T5181] xt_hashlimit: size too large, truncated to 1048576 [ 110.766391][ T30] audit: type=1400 audit(2000000073.814:694): avc: denied { ioctl } for pid=5176 comm="syz.3.2074" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.843396][ T63] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 110.869145][ T63] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0018/input/input27 [ 110.966207][ T30] audit: type=1400 audit(2000000074.124:695): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1187 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.993930][ T63] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 111.070788][ T5185] udevd[5185]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 111.308933][ T5198] loop3: detected capacity change from 0 to 2048 [ 111.326113][ T63] usb 1-1: USB disconnect, device number 10 [ 111.338183][ T5196] loop5: detected capacity change from 0 to 4096 [ 111.379773][ T5196] EXT4-fs (loop5): Test dummy encryption mode enabled [ 111.414824][ T5196] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 111.436415][ T5198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.470734][ T5198] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.487981][ T5196] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,data_err=abort,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000017,,errors=continue. Quota mode: writeback. [ 111.617210][ T5206] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2082: bg 0: block 345: padding at end of block bitmap is not set [ 111.656411][ T5196] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 111.691904][ T5206] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 111.722734][ T5206] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.722734][ T5206] [ 111.743920][ T45] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 111.774875][ T45] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.774875][ T45] [ 111.799573][ T45] EXT4-fs (loop3): Total free blocks count 0 [ 111.812677][ T45] EXT4-fs (loop3): Free/Dirty block details [ 111.833148][ T45] EXT4-fs (loop3): free_blocks=0 [ 111.857992][ T45] EXT4-fs (loop3): dirty_blocks=576 [ 111.872050][ T45] EXT4-fs (loop3): Block reservation details [ 111.885846][ T45] EXT4-fs (loop3): i_reserved_data_blocks=36 [ 112.082670][ T5242] loop3: detected capacity change from 0 to 512 [ 112.095290][ T5238] loop5: detected capacity change from 0 to 8192 [ 112.143415][ T39] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 112.152504][ T5242] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 112.177571][ T39] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.209890][ T5248] udevd[5248]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 112.213732][ T5242] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.293658][ T63] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 112.355474][ T5258] MTRR 1 not used [ 112.520555][ T5261] loop5: detected capacity change from 0 to 1024 [ 112.553773][ T5265] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65381 sclass=netlink_xfrm_socket pid=5265 comm=syz.0.2108 [ 112.563328][ T5263] loop2: detected capacity change from 0 to 2048 [ 112.588155][ T5261] EXT4-fs (loop5): Ignoring removed oldalloc option [ 112.621896][ T5273] Write-error on swap-device (8:0:801384) [ 112.630423][ T5261] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c555,oldalloc,,errors=continue. Quota mode: none. May 18 03:34:35 syzkaller kern.alert kernel: [ 112.621896][ T5273] Write-error on swap-device (8:0:801384) [ 112.663871][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.692903][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.713987][ T5263] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.725639][ T5261] EXT4-fs (loop5): shut down requested (0) May 18 03:34:35 syzkaller kern.a[ 112.734964][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 lert kernel: [ 112.725639][ T5261] EXT4-fs (loop5): shut down requested (0) [ 112.782292][ T63] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 112.824375][ T5285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2107: bg 0: block 345: padding at end of block bitmap is not set [ 112.833038][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.882474][ T5288] loop5: detected capacity change from 0 to 128 [ 112.885488][ T63] usb 5-1: config 0 descriptor?? [ 112.892861][ T5285] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 112.943552][ T5285] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.943552][ T5285] [ 113.085553][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 113.112677][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.112677][ T45] [ 113.144338][ T45] EXT4-fs (loop2): Total free blocks count 0 [ 113.150617][ T45] EXT4-fs (loop2): Free/Dirty block details [ 113.161605][ T5301] binder: 5300:5301 ioctl 4018620d 0 returned -22 [ 113.169071][ T45] EXT4-fs (loop2): free_blocks=0 [ 113.182725][ T45] EXT4-fs (loop2): dirty_blocks=368 [ 113.192813][ T45] EXT4-fs (loop2): Block reservation details [ 113.202997][ T45] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 113.373687][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.380740][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.383191][ T5316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.388464][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.419368][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.430958][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.442705][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.453353][ T63] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 113.472545][ T63] isku 0003:1E7D:319C.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 113.475849][ T5316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 113.498385][ T5316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 113.538318][ T10] attempt to access beyond end of device [ 113.538318][ T10] loop2: rw=1, want=17179852770, limit=512 [ 113.603648][ T5323] udevd[5323]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 113.785205][ T5321] EXT4-fs error: 340 callbacks suppressed [ 113.785226][ T5321] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2132: Detected aborted journal [ 113.802458][ T5233] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2098: Detected aborted journal [ 113.820390][ T5233] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2098: Detected aborted journal [ 113.835746][ T5233] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2098: Detected aborted journal [ 113.837066][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 113.862767][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 113.868175][ T5321] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2132: Detected aborted journal [ 113.874396][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 113.894001][ T5233] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2098: Detected aborted journal [ 113.896823][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 113.919656][ T5321] EXT4-fs: 300 callbacks suppressed [ 113.919669][ T5321] EXT4-fs (sda1): Remounting filesystem read-only [ 113.929815][ T5233] EXT4-fs (sda1): Remounting filesystem read-only [ 113.934548][ T5321] EXT4-fs (sda1): Remounting filesystem read-only [ 113.945086][ T5325] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 113.960189][ T5325] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 113.963081][ T5233] EXT4-fs (sda1): Remounting filesystem read-only [ 113.977073][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 113.982826][ T5321] EXT4-fs (sda1): Remounting filesystem read-only [ 113.984916][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 113.997592][ T5302] EXT4-fs (sda1): Remounting filesystem read-only [ 114.006807][ T5302] EXT4-fs (sda1): Remounting filesystem read-only [ 114.013698][ T5302] EXT4-fs (sda1): Remounting filesystem read-only [ 114.021029][ T5325] F2FS-fs (loop2): invalid crc value [ 114.058162][ T306] usb 5-1: USB disconnect, device number 12 [ 114.074126][ T5325] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 114.109812][ T5325] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 114.116980][ T5325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.143435][ T5325] attempt to access beyond end of device [ 114.143435][ T5325] loop2: rw=10241, want=53256, limit=40427 [ 114.179681][ T288] attempt to access beyond end of device [ 114.179681][ T288] loop2: rw=2049, want=45104, limit=40427 [ 114.594513][ T5335] netlink: 'syz.5.2134': attribute type 1 has an invalid length. [ 114.619173][ T306] wacom 0003:056A:003F.001B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 114.629159][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 114.659598][ T5346] udevd[5346]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 114.673322][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.688819][ T5338] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.762178][ T5364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2133: bg 0: block 345: padding at end of block bitmap is not set [ 114.763997][ T306] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 114.784526][ T306] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 114.792727][ T306] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 114.793948][ T5360] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2144'. [ 114.808368][ T5364] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 114.823590][ T5366] udevd[5366]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 114.827665][ T5364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 114.827665][ T5364] [ 114.846325][ T5360] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 114.855163][ T5360] netlink: 'syz.2.2144': attribute type 2 has an invalid length. [ 114.874390][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2144'. [ 115.522434][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 116.391997][ T5372] set_capacity_and_notify: 3 callbacks suppressed [ 116.392014][ T5372] loop2: detected capacity change from 0 to 512 [ 116.415516][ T8] EXT4-fs (loop4): This should not happen!! Data will be lost [ 116.415516][ T8] [ 116.902585][ T8] EXT4-fs (loop4): Total free blocks count 0 [ 117.382765][ T63] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 117.390649][ T8] EXT4-fs (loop4): Free/Dirty block details [ 117.400764][ T8] EXT4-fs (loop4): free_blocks=0 [ 117.410869][ T8] EXT4-fs (loop4): dirty_blocks=1568 [ 117.421539][ T5372] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 117.425935][ T8] EXT4-fs (loop4): Block reservation details [ 117.457201][ T8] EXT4-fs (loop4): i_reserved_data_blocks=98 [ 117.459043][ T5372] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.467215][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 117.467229][ T30] audit: type=1400 audit(2000000080.624:743): avc: denied { ioctl } for pid=5379 comm="syz.5.2151" path="socket:[34961]" dev="sockfs" ino=34961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.520832][ T5380] netlink: 'syz.5.2151': attribute type 2 has an invalid length. [ 117.552220][ T5383] cgroup: fork rejected by pids controller in /syz3 [ 117.649181][ T30] audit: type=1400 audit(2000000080.804:744): avc: denied { load_policy } for pid=5395 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.670797][ T5396] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was -2130789632) [ 117.679893][ T5398] loop2: detected capacity change from 0 to 512 [ 117.702567][ T5396] SELinux: failed to load policy [ 117.802752][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.829573][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.850397][ T63] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 117.864263][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.891655][ T63] usb 1-1: config 0 descriptor?? [ 118.131074][ T5419] loop2: detected capacity change from 0 to 40427 [ 118.149547][ T5419] F2FS-fs (loop2): invalid crc value [ 118.192528][ T5419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.253553][ T8] tipc: Left network mode [ 118.274902][ T5419] F2FS-fs (loop2): Start checkpoint disabled! [ 118.291763][ T5419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 118.335549][ T30] audit: type=1400 audit(2000000081.494:745): avc: denied { setattr } for pid=5417 comm="syz.2.2170" path="/501/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.373770][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.391313][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.399301][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.420670][ T5437] loop4: detected capacity change from 0 to 512 [ 118.427581][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.427927][ T45] attempt to access beyond end of device [ 118.427927][ T45] loop2: rw=2049, want=40976, limit=40427 [ 118.450983][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.460413][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.468120][ T5437] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.488231][ T63] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 118.512208][ T5437] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.521286][ T63] isku 0003:1E7D:319C.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 118.536336][ T5437] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.543748][ T5437] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.2177: bad orphan inode 15 [ 118.572306][ T5437] ext4_test_bit(bit=14, block=18) = 1 [ 118.588233][ T5437] is_bad_inode(inode)=0 [ 118.609224][ T5437] NEXT_ORPHAN(inode)=1023 [ 118.613691][ T5439] udevd[5439]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 118.652686][ T5437] max_ino=32 [ 118.655993][ T5437] i_nlink=0 [ 118.663057][ T5437] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2177: bg 0: block 440: padding at end of block bitmap is not set [ 118.686108][ T5437] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 118.710089][ T5437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.731448][ T5437] EXT4-fs (loop4): shut down requested (0) May 18 03:34:41 syzkaller kern.alert kernel: [ 118.731448][ T5437] EXT4-fs (loop4): shut down requested (0) [ 118.794181][ T5369] EXT4-fs error: 168 callbacks suppressed [ 118.794204][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.814174][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.826674][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.838429][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.850206][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.872387][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.894761][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.906959][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.919310][ T5369] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2148: Detected aborted journal [ 118.932468][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 118.937397][ T5442] EXT4-fs: 134 callbacks suppressed [ 118.937412][ T5442] EXT4-fs (sda1): Remounting filesystem read-only [ 118.960979][ T5369] EXT4-fs (sda1): Remounting filesystem read-only [ 118.961459][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 118.967595][ T5369] EXT4-fs (sda1): Remounting filesystem read-only [ 118.982956][ T63] usb 1-1: USB disconnect, device number 11 [ 118.996317][ T5444] EXT4-fs (sda1): Remounting filesystem read-only [ 118.996602][ T5443] EXT4-fs (sda1): Remounting filesystem read-only [ 119.009957][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 119.010393][ T5444] EXT4-fs (sda1): Remounting filesystem read-only [ 119.023014][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 119.026741][ T5446] EXT4-fs (sda1): Remounting filesystem read-only [ 119.036723][ T8] device bridge_slave_1 left promiscuous mode [ 119.044288][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.052179][ T30] audit: type=1400 audit(2000000082.204:746): avc: denied { setopt } for pid=5444 comm="syz.5.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.075035][ T8] device bridge_slave_0 left promiscuous mode [ 119.081471][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.092820][ T8] device veth1_macvtap left promiscuous mode [ 119.099247][ T8] device veth0_vlan left promiscuous mode [ 119.312762][ T306] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.563055][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 119.682798][ T306] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.711746][ T306] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.723260][ T306] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 119.736814][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.743800][ T306] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.754817][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.764618][ T306] usb 3-1: config 0 descriptor?? [ 119.784505][ T5459] SELinux: failed to load policy [ 120.243405][ T306] hid (null): nested delimiters [ 120.414002][ T5463] loop5: detected capacity change from 0 to 512 [ 120.446125][ T5463] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.475450][ T306] usb 3-1: USB disconnect, device number 8 [ 120.483289][ T5463] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.519251][ T5483] loop2: detected capacity change from 0 to 40427 [ 121.546333][ T5483] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 121.562715][ T5483] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 121.574609][ T5483] F2FS-fs (loop2): invalid crc value [ 121.581361][ T5483] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 121.617806][ T5483] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 121.628510][ T5483] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.658447][ T8] attempt to access beyond end of device [ 121.658447][ T8] loop2: rw=2049, want=45104, limit=40427 [ 121.670393][ T30] audit: type=1400 audit(2000000084.824:747): avc: denied { remove_name } for pid=5482 comm="syz.2.2190" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.694419][ T30] audit: type=1400 audit(2000000084.824:748): avc: denied { unlink } for pid=5482 comm="syz.2.2190" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.211793][ T30] audit: type=1326 audit(2000000086.364:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz.2.2201" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b22159 code=0x0 [ 123.214199][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 123.282897][ T5512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2199'. [ 123.285147][ T5510] loop4: detected capacity change from 0 to 8192 [ 123.291987][ T5512] tipc: Enabling of bearer rejected, media not registered [ 123.309252][ T5514] /dev/loop0: Can't open blockdev [ 123.344268][ T5510] loop4: p1 < > p2 < > p3 p4 < > [ 123.349380][ T5510] loop4: partition table partially beyond EOD, truncated [ 123.357004][ T5510] loop4: p1 start 67108864 is beyond EOD, truncated [ 123.365081][ T5510] loop4: p3 start 100859904 is beyond EOD, truncated [ 124.369172][ T5518] EXT4-fs error: 116 callbacks suppressed [ 124.369189][ T5518] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2204: Detected aborted journal [ 124.371051][ T5517] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2203: Detected aborted journal [ 124.376023][ T5519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2205: Detected aborted journal [ 124.391941][ T5516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 124.402659][ T5518] EXT4-fs: 85 callbacks suppressed [ 124.402671][ T5518] EXT4-fs (sda1): Remounting filesystem read-only [ 124.408377][ T5517] EXT4-fs (sda1): Remounting filesystem read-only [ 124.432648][ T5519] EXT4-fs (sda1): Remounting filesystem read-only [ 124.438213][ T5516] EXT4-fs (sda1): Remounting filesystem read-only [ 124.451260][ T5516] EXT4-fs error (device sda1) in __ext4_new_inode:1097: Journal has aborted [ 124.453840][ T5518] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2204: Detected aborted journal [ 124.465531][ T5519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2205: Detected aborted journal [ 124.484480][ T5517] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2203: Detected aborted journal [ 124.492671][ T5518] EXT4-fs (sda1): Remounting filesystem read-only [ 124.502281][ T5519] EXT4-fs (sda1): Remounting filesystem read-only [ 124.508918][ T5517] EXT4-fs (sda1): Remounting filesystem read-only [ 124.509127][ T5518] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2204: Detected aborted journal [ 124.515836][ T5519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2205: Detected aborted journal [ 124.537690][ T5519] EXT4-fs (sda1): Remounting filesystem read-only [ 124.545566][ T5519] EXT4-fs (sda1): Remounting filesystem read-only [ 124.552510][ T5518] EXT4-fs (sda1): Remounting filesystem read-only [ 125.676076][ T5526] loop5: detected capacity change from 0 to 512 [ 125.686844][ T30] audit: type=1400 audit(2000000088.844:750): avc: denied { bind } for pid=5528 comm="syz.2.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.707872][ T30] audit: type=1400 audit(2000000088.864:751): avc: denied { connect } for pid=5528 comm="syz.2.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.742027][ T30] audit: type=1400 audit(2000000088.884:752): avc: denied { write } for pid=5528 comm="syz.2.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.803205][ T5526] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.822736][ T5526] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.302779][ T307] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.542738][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 127.662801][ T307] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 127.671153][ T307] usb 6-1: config 1 has no interface number 0 [ 127.677499][ T307] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.687850][ T307] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.698081][ T307] usb 6-1: config 1 interface 105 has no altsetting 0 [ 127.862742][ T307] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 127.871959][ T307] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.880457][ T307] usb 6-1: Product: syz [ 127.884844][ T307] usb 6-1: Manufacturer: syz [ 127.889555][ T307] usb 6-1: SerialNumber: syz [ 127.912758][ T5546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.919990][ T5546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.353902][ T5546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.361034][ T5546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.434517][ T5553] loop2: detected capacity change from 0 to 512 [ 128.483802][ T5553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.812736][ T307] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 128.842723][ T307] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 128.872760][ T307] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 128.887110][ T307] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d2:66:03:75:31:f3 [ 128.907574][ T30] audit: type=1400 audit(2000000092.064:753): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 128.938104][ T307] usb 6-1: USB disconnect, device number 2 [ 128.947794][ T307] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 128.959324][ T140] aqc111 6-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 128.959341][ T30] audit: type=1400 audit(2000000092.084:754): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.982684][ T140] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 128.990277][ T30] audit: type=1400 audit(2000000092.084:755): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=5144 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.007041][ T140] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 129.030056][ T30] audit: type=1400 audit(2000000092.084:756): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=5144 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.047985][ T140] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 129.055802][ T30] audit: type=1400 audit(2000000092.084:757): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=5144 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.079676][ T140] aqc111 6-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 129.095855][ T140] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 129.104171][ T140] aqc111 6-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 129.112419][ T140] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 129.121084][ T140] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 129.130044][ T140] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 129.138730][ T140] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 129.147714][ T307] aqc111 6-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 129.156173][ T307] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 129.164675][ T307] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 129.172862][ T307] aqc111 6-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 129.402984][ T307] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 129.412974][ T307] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 129.422324][ T307] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 129.954235][ T277] EXT4-fs error: 56 callbacks suppressed [ 129.954268][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 129.974829][ T5564] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2219: Detected aborted journal [ 129.979150][ T5563] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 129.997261][ T277] EXT4-fs: 39 callbacks suppressed [ 129.997295][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 130.002685][ T5564] EXT4-fs (sda1): Remounting filesystem read-only [ 130.009166][ T5563] EXT4-fs (sda1): Remounting filesystem read-only [ 130.026220][ T5565] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2220: Detected aborted journal [ 130.033639][ T5564] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2219: Detected aborted journal [ 130.037401][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 130.059560][ T5565] EXT4-fs (sda1): Remounting filesystem read-only [ 130.066172][ T5563] EXT4-fs error (device sda1) in __ext4_new_inode:1097: Journal has aborted [ 130.072703][ T5564] EXT4-fs (sda1): Remounting filesystem read-only [ 130.078079][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 130.090605][ T5567] loop5: detected capacity change from 0 to 512 [ 130.091680][ T5568] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2221: Detected aborted journal [ 130.111860][ T5569] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.2222: Detected aborted journal [ 130.123365][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 130.134658][ T5569] EXT4-fs (sda1): Remounting filesystem read-only [ 130.141788][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 130.149246][ T5568] EXT4-fs (sda1): Remounting filesystem read-only [ 130.156570][ T5569] EXT4-fs (sda1): Remounting filesystem read-only [ 130.230330][ T5567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.2220: missing EA_INODE flag [ 130.259561][ T5567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2220: error while reading EA inode 2 err=-117 [ 130.293322][ T5567] EXT4-fs (loop5): 1 orphan inode deleted [ 130.299285][ T5567] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 130.334013][ T30] audit: type=1400 audit(2000000093.494:758): avc: denied { mounton } for pid=5565 comm="syz.5.2220" path="/103/file0/file0" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.771892][ T5579] loop5: detected capacity change from 0 to 256 [ 131.792999][ T5584] loop4: detected capacity change from 0 to 1024 [ 131.994006][ T5584] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 132.007738][ T5584] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.024544][ T5584] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 132.045606][ T5584] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.536648][ T30] audit: type=1400 audit(2000000096.694:759): avc: denied { watch watch_reads } for pid=5595 comm="syz.2.2230" path="/514/file0" dev="tmpfs" ino=2711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.606163][ T30] audit: type=1400 audit(2000000096.694:760): avc: denied { setopt } for pid=5592 comm="syz.5.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.405904][ T5606] EXT4-fs error: 54 callbacks suppressed [ 135.405921][ T5606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2236: Detected aborted journal [ 135.405923][ T5605] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2234: Detected aborted journal [ 135.405946][ T5605] EXT4-fs: 39 callbacks suppressed [ 135.405964][ T5605] EXT4-fs (sda1): Remounting filesystem read-only [ 135.411687][ T5606] EXT4-fs (sda1): Remounting filesystem read-only [ 135.430405][ T5604] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 135.436317][ T5607] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2235: Detected aborted journal [ 135.442373][ T5605] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.2234: Detected aborted journal [ 135.462692][ T5607] EXT4-fs (sda1): Remounting filesystem read-only [ 135.468527][ T5604] EXT4-fs (sda1): Remounting filesystem read-only [ 135.503717][ T5606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2236: Detected aborted journal [ 135.507744][ T5605] EXT4-fs (sda1): Remounting filesystem read-only [ 135.520410][ T5607] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2235: Detected aborted journal [ 135.526244][ T5604] EXT4-fs error (device sda1) in __ext4_new_inode:1097: Journal has aborted [ 135.547438][ T5606] EXT4-fs (sda1): Remounting filesystem read-only [ 135.554673][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 135.567060][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 135.573219][ T5606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2236: Detected aborted journal [ 135.574291][ T5607] EXT4-fs (sda1): Remounting filesystem read-only [ 135.593582][ T5611] EXT4-fs (sda1): Remounting filesystem read-only [ 135.596905][ T5606] EXT4-fs (sda1): Remounting filesystem read-only [ 135.609074][ T30] audit: type=1400 audit(2000000098.774:761): avc: denied { map } for pid=5607 comm="syz.5.2235" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.503266][ T5623] loop2: detected capacity change from 0 to 2048 [ 137.634166][ T5623] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,minixdf,quota,errors=remount-ro,data_err=ignore,i_version,grpid,. Quota mode: writeback. [ 137.650653][ T5623] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.752663][ T290] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.152683][ T290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.232682][ T290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.243713][ T290] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.252817][ T290] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 138.263911][ T290] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 138.277328][ T290] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 138.288137][ T290] usb 1-1: config 1 interface 1 has no altsetting 0 [ 138.532690][ T290] usb 1-1: string descriptor 0 read error: -22 [ 138.538996][ T290] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 138.548259][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.272690][ T290] usb 1-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 139.292702][ T290] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 139.302453][ T290] usb 1-1: Warning! Unlikely big volume range (=11163), cval->res is probably wrong. [ 139.312089][ T290] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = -11163/0/1 [ 139.334084][ T290] usb 1-1: USB disconnect, device number 12 [ 139.522714][ T30] audit: type=1400 audit(2000000102.674:762): avc: denied { create } for pid=5631 comm="syz.2.2244" dev="anon_inodefs" ino=35225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.553497][ T5085] udevd[5085]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=3 req=2167 state=1 status=67 (errno 11: Resource temporarily unavailable) [ 139.555380][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 139.626619][ T30] audit: type=1400 audit(2000000102.754:763): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14006]" dev="pipefs" ino=14006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 139.794610][ T45] tipc: Left network mode [ 140.513302][ T45] device bridge_slave_1 left promiscuous mode [ 140.519553][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.527469][ T45] device bridge_slave_0 left promiscuous mode [ 140.533748][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.542104][ T45] device veth1_macvtap left promiscuous mode [ 140.548533][ T45] device veth0_vlan left promiscuous mode [ 140.614045][ T1] EXT4-fs error: 81 callbacks suppressed [ 140.614065][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.633218][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.644654][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.655969][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.667249][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.678541][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.691901][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.703327][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.714729][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.726087][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 140.976145][ T45] tipc: Disabling bearer [ 140.981604][ T45] tipc: Left network mode [ 142.194423][ T45] device bridge_slave_1 left promiscuous mode [ 142.200597][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.208432][ T45] device bridge_slave_0 left promiscuous mode [ 142.214654][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.223707][ T45] device bridge_slave_1 left promiscuous mode [ 142.229844][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.237776][ T45] device bridge_slave_0 left promiscuous mode [ 142.244180][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.253294][ T45] device bridge_slave_1 left promiscuous mode [ 142.259685][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.267524][ T45] device bridge_slave_0 left promiscuous mode [ 142.273759][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.282477][ T45] device veth1_macvtap left promiscuous mode [ 142.288732][ T45] device veth0_vlan left promiscuous mode [ 142.294767][ T45] device veth1_macvtap left promiscuous mode [ 142.300788][ T45] device veth0_vlan left promiscuous mode [ 142.306917][ T45] device batadv_slave_1 left promiscuous mode [ 142.313068][ T45] device veth1_to_batadv left promiscuous mode [ 142.319244][ T45] device veth1_macvtap left promiscuous mode [ 142.325735][ T45] device veth0_vlan left promiscuous mode serialport: VM disconnected.